Misago/misago/users/api/userendpoints/changepassword.py

from rest_framework.response import Response

from django.utils.translation import ugettext as _

from misago.conf import settings
from misago.core.mail import mail_user
from misago.users.credentialchange import store_new_credential
from misago.users.serializers import ChangePasswordSerializer


def change_password_endpoint(request, pk=None):
    serializer = ChangePasswordSerializer(
        data=request.data,
        context={'user': request.user},
    )

    if not serializer.is_valid():
        return Response(serializer.errors, status=400)

    token = store_new_credential(
        request, 'password', serializer.validated_data['new_password']
    )

    mail_subject = _("Confirm password change on %(forum_name)s forums")
    mail_subject = mail_subject % {'forum_name': settings.forum_name}

    mail_user(
        request, request.user, mail_subject, 'misago/emails/change_password', {'token': token}
    )

    return Response(status=204)